CVE-2025-11036: code-projects E-Commerce Website admin_account_update.php sql injection

Published Sep 26, 2025

Updated

A vulnerability was identified in code-projects E-Commerce Website 1.0. This affects an unknown function of the file /pages/adminaccountupdate.php. Such manipulation of the argument userid leads to sql injection. The attack can be launched remotely. The exploit is publicly available and might be used.

Affected Software

2 affected components

Code-projects E-Commerce Website

Fabian E-commerce Website=1.0

Event History

Sep 26, 2025

CVE Published

via MITRE·07:02 PM

Data Sourced

via MITRE·07:02 PM

DescriptionSeverityWeakness

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is the severity of CVE-2025-11036?

CVE-2025-11036 is classified as a high-severity vulnerability due to its potential for SQL injection.

How does CVE-2025-11036 affect the E-Commerce Website 1.0?

CVE-2025-11036 affects the admin_account_update.php file, allowing remote SQL injection attacks through manipulation of the user_id argument.

What are the potential impacts of exploiting CVE-2025-11036?

Exploiting CVE-2025-11036 could result in unauthorized access to the database, data leakage, or data manipulation.

How can I remediate CVE-2025-11036?

Remediation for CVE-2025-11036 involves validating and sanitizing user inputs to prevent SQL injection attacks.

Is CVE-2025-11036 easily exploitable?

Yes, CVE-2025-11036 is considered easily exploitable since the vulnerability can be launched remotely.